---
title: Roles
id: "en:accounts:ROOT:roles.adoc"
site: en
component: accounts
module: ROOT
version: 3.0
lang: en
url: "https://help.rtlscloud.io/en/accounts/3.0/roles.html"
source_repo: "https://github.com/iot-invent/xCloud.git@3.0.x"
source_path: accounts/docs/en/modules/ROOT/pages/roles.adoc
---

# Roles

A role is a bundle of permissions. Permissions are defined in roles and nowhere else — a user is never granted an individual right, always a role, and always on a particular object: a tenant or a space.

This page is the catalogue of the roles that ship with the platform. How a role is granted is described under [Permissions](permissions.md).

## The roles that ship with the platform

The **Level** column says which object a role can be granted on. The **Includes** column names the roles whose permissions come with it — granting **Space Admin** grants **Device Admin** and **Location Admin** along with it.

| Role | Level | Includes | What for |
| --- | --- | --- | --- |
| **Tenant** |  |  |  |
| Tenant Admin | Tenant | Space Admin, RTLS Analysis User, Tracking Admin | Manages the tenant: reading and editing users, invitations in full, groups, trusted certificates, integration flows, gateways — and through the included roles everything that is possible in the tenant’s spaces. |
| **IoT Spaces** |  |  |  |
| Space Admin | Space | Device Admin, Location Admin | Full access to the space: locations, devices, tags, tag profiles, scenarios and their operation. |
| Space Viewer | Space | Device Viewer, Location Viewer | Read-only access to the whole space. |
| Location Admin | Space | Location Editor | Full access to the locations of the space. |
| Location Editor | Space | Location Viewer | Creating, editing and deleting locations, editing maps, starting and stopping the scenarios of a location. |
| Location Viewer | Space |  | Reading locations, location types, maps and scenarios. |
| Device Admin | Space |  | Full access to the devices of the space and their things. |
| Device Viewer | Space |  | Reading devices and device models. |
| **RTLS Analysis** |  |  |  |
| RTLS Analysis User | Space |  | Analysis tags and reference points in full; locations, maps and tags for reading, tags for editing as well. |
| **Tracking** |  |  |  |
| Tracking Admin | Space | Tracking Viewer | Full access to the Tracking application: assets, asset types, routes, rules, tracks, labels and export templates. |
| Tracking Viewer | Space |  | Read-only access to the Tracking application. |
| Tracking Asset Assignment | Space |  | Creating and editing assets and assigning tags to them — the role for the workplace where tags are attached to equipment, without access to the rest of the application. |